Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD08160A28ED11F18DF388F2DAE4EC9C.roa
File: DD08160A28ED11F18DF388F2DAE4EC9C.roa (raw, json)
Hash identifier: fXULX0RHxP7lK2AzCvKb6i0yRDxy6jduMg8+e6rBBvw=
Subject key identifier: 70:80:9D:C8:CF:B3:E2:7E:56:86:4C:04:C8:CE:91:2F:9E:32:C6:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A76E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD08160A28ED11F18DF388F2DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 08:29:11 +0000
ROA not before: Thu 26 Mar 2026 08:29:06 +0000
ROA not after: Sun 03 May 2026 08:29:06 +0000
asID: 135222
IP address blocks: 45.195.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108398 (0x1a76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 08:29:06 2026 GMT
Not After : May 3 08:29:06 2026 GMT
Subject: CN=69c4ee57-31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:ee:ff:55:ee:27:a9:34:3a:12:b8:34:99:
f2:2f:f6:05:6e:32:4d:df:73:fe:a0:c8:71:3e:28:
e0:51:ec:09:07:f6:4e:94:ae:a7:b2:3b:e2:1a:77:
10:a3:95:9d:e0:68:a1:40:da:94:4d:49:0f:3d:6c:
54:ae:78:6d:30:e3:88:20:17:7b:01:f7:b5:71:2a:
91:1c:5b:9e:02:8a:6b:cc:98:3d:c9:ba:57:66:de:
2c:c4:1e:7c:42:44:94:4c:5e:77:f1:fb:5e:b8:37:
14:d8:5a:5b:20:34:51:50:d9:99:91:2c:18:2f:1d:
f3:47:55:33:2c:7e:88:b0:8a:90:a4:4d:34:e7:79:
cd:0c:6b:b7:6a:01:8e:01:a4:c0:79:34:46:90:6c:
54:3e:f8:4c:fe:d3:e7:b9:91:45:bc:a1:d4:3e:56:
87:44:56:a5:49:79:26:f2:58:bc:d8:ec:bc:b4:46:
fe:d8:8e:18:a1:59:46:d1:e4:ff:fe:6a:7c:2b:59:
13:80:51:22:ee:0d:a2:7e:2a:a4:d5:93:3b:e9:ef:
98:60:0c:ad:87:b8:0c:a0:f6:1a:f4:67:7e:d4:e8:
3e:e8:be:9c:fa:8f:df:f3:01:cc:b2:27:ea:e8:e7:
da:16:44:ee:5a:94:37:cc:f1:dc:aa:a5:91:6e:f9:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:9D:C8:CF:B3:E2:7E:56:86:4C:04:C8:CE:91:2F:9E:32:C6:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD08160A28ED11F18DF388F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
84:89:73:f5:6d:56:d2:75:1d:35:7b:1c:1d:55:a1:28:cd:b7:
36:17:f3:ed:7c:b7:bf:b1:4c:b9:44:a2:36:48:c1:c7:66:a5:
31:21:e5:7d:c3:9a:ec:7d:30:26:12:0c:58:f3:2b:ca:3b:51:
9b:cd:69:fc:dc:16:a2:c4:91:71:f9:da:8f:57:d6:0c:04:0c:
38:17:1f:4b:60:58:61:0c:de:00:0b:33:1c:3e:2b:3e:14:cd:
ca:b8:60:3b:83:db:0f:04:a5:38:a4:96:53:d5:b5:b1:6b:bd:
b8:be:4b:b2:0a:bc:a1:ee:e7:4b:7d:04:83:cb:fc:5b:b8:20:
b9:8b:de:2a:c4:be:e6:82:a0:45:ee:c7:04:88:d7:20:70:84:
42:14:66:ca:d2:f8:73:70:26:b4:45:f4:a5:52:0d:90:26:15:
21:66:6e:7a:0b:db:47:52:42:57:4f:e3:e6:38:9b:8f:84:dc:
59:a7:d4:1e:54:70:79:b0:3e:05:7d:ae:a7:a5:fa:58:1b:5e:
30:6e:83:02:be:28:e0:b8:4f:9a:bf:77:b8:39:ad:34:b7:0e:
2a:58:a7:3b:24:4a:06:41:53:8c:b2:bb:fb:b1:45:a4:39:5a:
9b:e8:71:8c:67:b4:a8:4c:6d:4f:e8:8f:55:c7:cd:ce:19:21:
a0:27:5e:6e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaduMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI2MDgyOTA2WhcNMjYwNTAzMDgyOTA2WjAYMRYw
FAYDVQQDEw02OWM0ZWU1Ny0zMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyBLu/1XuJ6k0OhK4NJnyL/YFbjJN33P+oMhxPijgUewJB/ZOlK6nsjvi
GncQo5Wd4GihQNqUTUkPPWxUrnhtMOOIIBd7Afe1cSqRHFueAoprzJg9ybpXZt4s
xB58QkSUTF538fteuDcU2FpbIDRRUNmZkSwYLx3zR1UzLH6IsIqQpE0053nNDGu3
agGOAaTAeTRGkGxUPvhM/tPnuZFFvKHUPlaHRFalSXkm8li82Oy8tEb+2I4YoVlG
0eT//mp8K1kTgFEi7g2ifiqk1ZM76e+YYAyth7gMoPYa9Gd+1Og+6L6c+o/f8wHM
sifq6OfaFkTuWpQ3zPHcqqWRbvnBUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHCA
ncjPs+J+VoZMBMjOkS+eMsYtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERDA4MTYwQTI4RUQxMUYxOERGMzg4RjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOfMA0GCSqGSIb3DQEBCwUA
A4IBAQCEiXP1bVbSdR01exwdVaEozbc2F/PtfLe/sUy5RKI2SMHHZqUxIeV9w5rs
fTAmEgxY8yvKO1GbzWn83BaixJFx+dqPV9YMBAw4Fx9LYFhhDN4ACzMcPis+FM3K
uGA7g9sPBKU4pJZT1bWxa724vkuyCryh7udLfQSDy/xbuCC5i94qxL7mgqBF7scE
iNcgcIRCFGbK0vhzcCa0RfSlUg2QJhUhZm56C9tHUkJXT+PmOJuPhNxZp9QeVHB5
sD4Ffa6npfpYG14wboMCvijguE+av3e4Oa00tw4qWKc7JEoGQVOMsrv7sUWkOVqb
6HGMZ7SoTG1P6I9Vx83OGSGgJ15u
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:06 2026 by rpki-client